Vulnerabilities > CVE-2006-7067 - Local Security vulnerability in Oracle Database Server 10.2.1

047910
CVSS 6.0 - MEDIUM
Attack vector
LOCAL
Attack complexity
HIGH
Privileges required
SINGLE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
high complexity
oracle

Summary

Oracle 10g R2 and possibly other versions allows remote attackers to trigger internal errors, and possibly have other impacts, via an "alter session set events" command with invalid arguments. NOTE: this issue was originally disputed by a third party, but the dispute was retracted. NOTE: this issue was called an "integer overflow" in the original source, but this might be incorrect.

Vulnerable Configurations

Part Description Count
Application
Oracle
1